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DETAILED ACTION 

1 . This office action is in response to applicants 1 application serial no. 09/586064 
filed on 6/2/2000. 

Information Disclosure Statement 

2. The information disclosure statement (IDS) submitted on 9/22/2000 and 
10/15/2001 has been considered by the examiner. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-6, 10-14, 16, 18-24 and 26-28 are rejected under 35 U.S.C. 103(a) as 

being unpatentable over Son et al. (U.S. Patent No. 6,229,895 hereinafter Son) in view 

of Fruehauf et al. (U.S. Patent No. 6,590981 hereinafter Fruehauf). 

In respect to claim 1, Son discloses a method for enabling a primary conditional access 

provider (CAP) and at least one secondary CAP to provide conditional access (CA) data 

in respective different formats to control access to at least one data service, comprising 

the steps of (see Fig. 1-6): 

(a) providing, at the primary CAP, first CA data in a first format for encrypting the at 
least one data service during a plurality of successive crypto-periods, and time data for 
identifying the successive crypto-periods (see Fig. 1-6 and col. 5, lines 1-35); 
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(b) providing the first CA data and the time data from the primary CAP to the at least 
one secondary CAP; wherein the at least one secondary CAP is responsive to the first 
CA data and time data for providing second CA data in a different, second format for the 
successive crypto-periods (see col. 5, lines 15-35); and 

(c) providing a data stream comprising the at least one encrypted data service and first 
and second CA data to user terminals, including at least a first user terminal that is 
compatible with the first CA data, and a second user terminal that is compatible with the 
second CA data (see col. 5, lines 35-50). Son does not explicitly disclose providing a 
time data for identifying the successive crypto-period. However, Fruehauf discloses a 
time data for identifying the successive crypto-period (see col. 6, lines 39-59). 
Therefore, it would have been obvious to one of ordinary skill jn the art at the time the 
invention was made to incorporate Son's teaching of providing at the primary CAP first 
CA data with Fruehaufs teaching of providing a time data for identifying the successive 
crypto-period for the purpose of determining when the synchronization time need to be 
readjusted if the cryptographic processing time exceed a predetermined limit (see 
Fruehauf col. 6, lines 53-59). 

In respect to claim 2, Son and Fruehauf disclose the method of claim 1 . Fruehauf 
further teaches wherein the time data indicates respective start times of the crypto- 
periods (see col. 6, lines 39-59, at any given time). 

In respect to claim 3, Son and Fruehauf disclose the method of claim 2. Fruehauf 
further discloses wherein the time data designates absolute times of the crypto-periods 
(see col. 6, lines 39-59, a predetermined limit). 
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In respect to claim 4, Son and Fruehauf disclose the method of claim 2. Fruehauf 
further discloses wherein the time data designates relative times of the crypto-periods in 
relation to a reference time of the at least one data service (see col. 6, lines 39-59, at 
any given time). 

In respect to claim 5, Son and Fruehauf disclose the method of claim 1 . Fruehauf 
further discloses wherein the time data is a lead time of at least one crypto-period (see 
col. 6, lines 39-59, at any given time). 

In respect to claim 6, Son and Fruehauf disclose the method of claim 5. Fruehauf further 

discloses wherein the lead time is responsive to a required processing time of the at 

least one secondary CAP (see col. 6, lines 39-59, at any given time). 

In response to claim 10, Son and Fruehauf disclose the method of claim 1 . Son further 

discloses the first CA data is streamed in real-time from the primary CAP to the at least 

one secondary CAP without being requested therefrom (see col. 3, lines 21-47). 

In respect to claim 1 1 , Son and Fruehauf disclose the method of claim 10. Son further 

discloses wherein the at least one secondary CAP provides its second CA data 

essentially in real-time after receipt of the first CA data and time data thereat (see col. 

.3, lines 37-47). 

In respect to claim 12, Son and Fruehauf disclose the method of claim 1 . Son further 
discloses comprising the further steps of storing the first and second synchronized CA 
data and the at least one encrypted data service for subsequent retrieval to provide said 
data stream (see col. 3, lines 42-47). Fruehauf further discloses synchronizing the first 
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CA data and the second CA data with the at least one encrypted data service (see col. 
6, lines 39-59). 

In respect to claim 13, Son and Fruehauf disclose the method of claim 12. Son further 
discloses comprising the further step of retrieving the first and second synchronized CA 
data and the at least one encrypted data service to provide said data stream in 
response to a user request (see col. 3, lines 49-59). 

In response to claim 14, Son and Fruehauf disclose the method of claim 13. Son further 
discloses wherein the user request is provided as part of a video-on -demand service 
(see col. 4, lines 49-59). 

In response to claim 16, Son and Fruehauf disclose the method of claim 1. Son further 
discloses wherein the first CA data is provided from the primary CAP to the at least one 
secondary CAP via a CA data delivery network (see col. 2, lines 1-30, cable distribution 
network). 

In respect to claim 18, Son and Fruehauf disclose the method of claim 1. Son further 
discloses wherein the first and second CA data are provided to a message insertion 
subsystem in-band with the encrypted data service to form said data stream (see col. 2, 
lines 1-30, cable distribution network). 

In response to claim 19, Son and Fruehauf disclose the method of claim 1 . Son further 
discloses wherein the first CA data and the time data are provided from the primary 
CAP to a plurality of secondary CAPs, each of which is responsive to the first CA data 
for providing CA data in different, respective formats for the successive crypto-periods 
(see col. 5, lines 1-35); the data stream comprises the CA data in the different, 
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respective formats; and the user terminals include respective user terminals that are 
compatible with the different, respective formats (see col. 5, lines 36-50). 
In respect to claim 20, Son and Fruehauf disclose the method of claim 1 . Son further 
discloses wherein the first CA data and encrypted data service are provided in a first 
data stream from the primary CAP to the at least one secondary CAP for insertion of the 
second CA data, and a corresponding second data stream is returned to the primary 
CAP for formation of said data stream that is provided to the user terminals (see col. 5, 
lines 1-56). 

Claims 21-23 are objected to as being dependent upon a rejected base claim, but would 
be allowable if rewritten in independent form including all of the limitations of the base 
claim and any intervening claims. 

In respect to claim 24, Son and Fruehauf disclose the method of claim 20. Son further 
discloses wherein the second data stream is formed by overwriting the first CA data with 
corresponding second CA data in corresponding packets of the first data stream (see 
col. 5, lines 5-15). 

In response to claim 26, Son and Fruehauf disclose the method of claim 1 . Son further 
discloses wherein the primary CAP first and at least one secondary CAPS are provided 
at a headend (see col. 2, lines 40-48). 

In respect to claim 27, Son and Fruehauf disclose the method of claim 1. Son further 
discloses wherein the first CA data is provided from the primary CAP to the at least one 
secondary CAP in an encrypted form, comprising the further step of: providing data to 
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the at least one secondary CAP for decrypting the encrypted first CA data (see col. 3. 
lines 35-40). 

In respect to claim 28, the claim limitations is an apparatus claim that is substantially 
similar to method claim 1 and therefore the same rejection applied. 

4. Claim 7 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Son et al. (U.S. Patent No. 6,229,895 hereinafter Son) in view of Fruehauf et al. (U.S. 
Patent No. 6,590981 hereinafter Fruehauf) as applied to claim 6 above, and further in 
view of Okamoto et al. (U.S. Patent No. 5,944,794 hereinafter Okamoto). 
In respect to claim 7, Son and Fruehauf disclose the method of claim 5. Son further 
discloses wherein the first CA data is provided to the at least one secondary CAP in 
successive packets, each packet comprising first CA data and time data for a plurality of 
crypto-periods (see col. 3, line 49-col. 4, line 10). Both Son and Fruehauf do not 
explicitly disclose transmitting time data for a plurality of crypto-period. However, 
Okamoto discloses transmitting time data for a plurality of crypto-period (see col. 15, 
lines 1-8 and col. 22, line 66-col. 23, line 13). Therefore, it would have been obvious to 
one of ordinary skill in the art at the time the invention was made to incorporate the 
Son's teaching of transmitting CA data from primary CAP to secondary CAP with 
Okamoto's teaching of including time data to carry out authentication process for the 
benefit of judging the success of an authentication process. 
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In respect to claim 8, Son and Fruehauf disclose the method of claim 7. Son further 
disclose wherein the plurality of crypto-periods comprise a current crypto-period and 
future crypto-periods (see col. 3, lines 49-65). 

5. Claims 9, 15, 17 and 25 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Son et al. (U.S. Patent No. 6,229,895 hereinafter Son) in view of 
Fruehauf et al. (U.S. Patent No. 6,590981 hereinafter Fruehauf) as applied to claim 6 
above, and further in view of Pinder et al. (U.S. Patent No. 6,105,134 hereinafater 
Pinder). 

In response to claim 9, Son and Fruehauf disclose the method of claim 1 . Both Son and 
Fruehauf do not explicitly disclose wherein the first CA data comprises a control word 
for each of the crypto-periods. However, Pinder discloses using control words as a key 
for each of the crypto-periods (see col. 8, line 64-col. 9, line 24). Therefore, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made 
to implement the control word as a key for a more secure data transfer because a 
control word a short term key and is generated by a random number generator (see col. 
9, line 1-3 and 11-12). 

In respect to claim 15, Son and Fruehauf disclose the method of claim 1. Son and 
Fruehauf do not disclose wherein the primary CAP provides a program identifier to the 
at least one secondary CAP to inform the at least one secondary CAP that the first CA 
data associated with the at least one data service. However, Pinder discloses a packet 
identifier (PID) that are carrying information for a given subcategory will have a same 
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PID (see col. 19, lines 9-40). It would have been obvious to one of ordinary skill in the 
art at the time the invention was made to incorporate Pinder's teaching of packet 
identifier with Son's teaching of packet transferring between primary CAP and 
secondary CAP in order to ensure that CA data sent from the primary CAP is 
corresponds to the correct data service being transferred (see col. 19, lines 11-16). 
In respect to claim 1 7, Son and Fruehauf disclose the method of claim 1 . Son and 
Fruehauf do not disclose but Pinder discloses wherein the first and second CA data are 
provided to a message insertion subsystem out-of-band from the encrypted data service 
to form said data stream (see col. 7, lines 26-55). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to combine the teaching of 
Son's first and second CA data from the encrypted data service to form a data stream 
with the teaching of Pinder sending out-of-band for the benefit of providing a wider 
distribution of channel (i.e. Internet) (see col. 8, lines 47-49). 

In respect to claim 25, Son and Fruehauf disclose the method of claim 1 . Son and 
Fruehauf do not explicitly disclose but Pinder discloses wherein the first CA data 
comprises entitlement control messages (ECM) (see col. 4, lines 14-36). It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
incorporate the entitlement control message taught by Pinder with Son's secure 
program data transmission between first and second CAP for a more secure data 
protection because contain information needed to decrypt the encrypted portion of the 

Allowable Subject Matter 
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6. Claims 21-23 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of 
the base claim and any intervening claims. 

The following is a statement of reasons for the indication of allowable subject 
matter: 

In respect to claim 21 , prior does not teach method claim 20, comprising the 
further steps of: 

Retaining a copy of the first data steam at the primary CAP; 

Filtering at the primary CAP, the second data steam that is returned form the at 
least one secondary CAP to recover the second CA data; and 

Combining the recovered second CA data with the retrained copy of the first data 
stream to form said data steam that is provided to the user terminals. 

In respect to claim 22, prior art does not teach the method of claim 20, 
comprising the further steps of : 

Retaining a copy of the first data steam to determined a deviation therebetween. 

In respect to claim 23, prior art does not teach the method of claim 22, 
comprising the further step of: 

If the deviation is detected, using the retained copy of the first data stream, 
which does not contain the second CA data, to form said data stream that is provided to 
the user terminals. 

associated instant data (see col. 4, lines 29-31). 





Application/Control Number: 09/586,064 
Art Unit: 2134 



Page 1 1 



Conclusion 



7. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

-Wasilewski et al. Discloses a conditional access system service for cable and 
television system. 

-Aras et al. Discloses a method and apparatus for monitoring audio visual 
materials presented to a subscriber. 

-Deiss discloses a conditional access filter as for a packet video signal inverse 
transport system. 

-Stockton et al. Discloses a mutichannel radio frequency transmission system to 
deliver wideband digital data into independent sectorized service areas. 

-Balachandran discloses a system and method for providing high-speed local 
telecommunication access. 

-Colligan discloses a selective renewable encryption for secure distribution of 
video on demand. 

-Heer et al. discloses encrypting method and apparatus enabling multiple access 
for multiple services and multiple transmission modes over a broadband communication 
network. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tongoc Tran whose telephone number is (703) 305- 
7690. The examiner can normally be reached on 8:30-5:00 M-F. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory A. Morse can be reached on (703) 308-4789. The fax phone 
number for the organization where this application or proceeding is assigned is (703) 
746-7240. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703)305- 
9600. 



Examiner Tongoc Tran 
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